Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: 4n/7J8wt6ILzxwXBJfeC3FXacqke6YMbRM8caGd36G4=
Subject key identifier: BA:21:2C:45:05:37:37:ED:D9:ED:A1:D7:33:6C:8D:B2:87:E9:FE:9E
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019881D48B335D915FB495A8CB1C70D63C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0D03
Signing time: Thu 07 Aug 2025 00:00:46 +0000
Manifest this update: Thu 07 Aug 2025 00:00:46 +0000
Manifest next update: Fri 08 Aug 2025 00:00:46 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: 58AjQwJpilXtO9CeakdwCTgQnUhU5/zgtihkKB8xgz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:8b:33:5d:91:5f:b4:95:a8:cb:1c:70:d6:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Aug 7 00:00:46 2025 GMT
Not After : Aug 8 00:00:46 2025 GMT
Subject: CN=ba212c45053737edd9eda1d7336c8db287e9fe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:27:83:2c:34:1d:b6:d6:4a:55:95:5c:74:
25:18:06:2c:d3:ef:43:a8:cf:e1:d2:e9:5d:2a:a0:
82:b6:00:e0:c3:fe:9c:50:33:77:05:19:23:7a:f3:
3f:90:91:6f:98:76:f1:8a:53:18:70:9c:07:e6:f5:
04:6e:82:0f:46:4b:c5:83:38:97:16:a7:eb:d6:e3:
89:41:eb:35:14:14:85:14:4b:63:c7:ea:ce:53:34:
2f:9b:56:14:a5:3e:3f:33:d4:b3:d5:66:d9:e3:e1:
74:a9:41:7c:15:e1:d0:84:7f:ee:fb:2d:81:94:9c:
f2:ae:71:61:51:f8:53:b6:d2:13:57:56:8f:15:3d:
4a:9b:73:ac:ba:70:58:4a:4f:c2:81:5f:ce:72:47:
6d:13:46:ba:7d:29:57:8c:c3:f0:8f:8d:ed:1a:1c:
69:8f:91:6f:af:17:90:9f:43:21:25:21:df:e5:36:
09:35:2f:ac:8f:07:1a:0c:c6:6a:0f:30:81:be:49:
dc:50:82:e6:c9:39:0a:32:77:27:34:a9:68:68:a1:
2a:14:01:60:9b:a1:0e:61:0e:03:26:24:89:61:e9:
f5:61:88:fc:13:0e:ea:7a:17:44:dd:e6:98:99:d2:
76:9d:f7:d6:34:b5:23:d2:85:66:98:48:cf:2c:d1:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:2C:45:05:37:37:ED:D9:ED:A1:D7:33:6C:8D:B2:87:E9:FE:9E
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:6c:77:9b:4c:4b:6d:8f:c9:5d:9b:9c:ea:e0:e1:98:83:
d6:72:4c:f9:1a:56:2f:db:b3:f3:0c:63:10:f5:12:37:a5:e1:
42:d6:c6:87:39:9b:33:c8:cc:0c:ae:f5:40:3e:81:83:61:c1:
b1:78:33:f0:c3:8e:cd:44:de:f5:85:e1:f3:bf:3f:ce:90:ba:
4b:b4:a0:d4:14:e6:53:bf:30:27:36:2b:94:9c:33:e7:89:92:
33:21:7b:35:0b:5f:a7:4b:35:b4:36:8e:22:db:86:be:c9:cf:
67:76:12:15:b3:0c:82:8b:56:1b:8e:7d:0e:51:42:4f:71:72:
65:95:d0:93:de:1e:b5:5f:37:9f:64:b0:47:fe:04:1f:55:50:
de:54:f8:ab:08:13:28:8d:ee:8d:fb:7f:31:7e:f8:e8:22:21:
e9:14:87:98:04:22:8c:58:65:7e:5d:c5:ba:fb:4f:c8:3e:b6:
9e:fc:e3:8d:2e:51:6a:55:6f:b9:eb:7d:8c:72:89:28:54:f1:
0a:15:25:c2:f6:e0:47:47:36:e3:04:ab:d5:01:5d:24:77:69:
2b:fd:58:de:c7:c1:13:0e:d6:86:a2:78:37:86:45:bb:96:da:
80:fc:61:af:fb:95:8a:4a:b4:56:c0:e1:6c:cb:a8:d9:4a:2f:
4c:80:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:36 2025 by rpki-client